CVE-2008-6533 | BDVDB-2026-35761 Detail
Description#
Drupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input format is deleted, which prevents the content from being properly filtered and allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00767.html
- http://www.vupen.com/english/advisories/2008/3414
- http://secunia.com/advisories/33147
- http://secunia.com/advisories/33112
- http://drupal.org/node/345441
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00740.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47259
- http://www.osvdb.org/50662
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.